The XSS Rat - Proud XSS N00b :-)

I have built: - A security testing repo: github.com/The-XSS-Rat/Secur… - An API hacking tool: github.com/The-XSS-Rat/hackx… - A blog: blog.hackxpert.com/ (Yeah I know cert expired, will look into that today) - 150 exploits + 6 lifelike labs: labs.hackxpert.com/ - A student base of over 180 000 big: udemy.com/user/wesley-thijs/… - A wealth of courses: thexssrat.com/ - A youtube channel with over 1200 video's: youtube.com/c/thexssrat - A medium with over 7300 followers: thexssrat.medium.com/ - An incredible fanbase of over 50 000 rats on youtube + 150 000 here - A discord server with over 10 000 members + one for CAPIE + CNWPP + Hacker's toolkit - A list of 10 students i got to directly reporting bugs: thexssrat.podia.com/achievem… - A song: youtube.com/watch?v=S3bP3juJ… (No AI) - A family of my own - Reports on some of the giants of this earth - A pentesting company And still i get constantly attacked for not knowing anything - just copy pasting shit and not being good enough :-) hahaha you are so funny - THEN GO DO BETTER <3 Much love rat pack!! Thank you for the support!

Hey you rats 😉 I am stressing the need to be ethical ALL the time and i won't stop doing that ... bad like i said sometimes a hat gives you a label ... i don't care what color of hat you wear but you know what i think about fucking with the lives of a child? I think you are the most pathetic, vile, disgusting piece of shit to waste air. I am not making nice words around it.. there is only 1 thing I can say about this. - If you think it is okay to fuck with someone's life that is small and still growing and has no say in it you should be condemend and excluded. Fuck you 🙂 PoS and i don't mean point of sales... You are not a rooster - you are just a cock 😄

hello amazing hacker :-) SPOOKY SALE is live in the Cheese Shop. 30 Oct → 3 Nov. → 75% off almost every course and cert → 50% off the 900 Endless bundle (every current, retired AND future course + CAPIE, CNWPP and CMWAP vouchers) → one-time buy. No subscription, no upsell. Yours forever. A few examples: → 003 Bug Bounty Guide Pt 1: €99 → €24.75 → 004 Broad Scope & API Hacking: €199 → €49.75 → 084 CMWAP: €159.99 → €40 → 050 OSCP prep: €50 → €12.50 → 020 XSS Guide + cert: €29 → €7.25 There are a LOT of bad actors out there. Best way to stop them is knowing exactly how they think. So let's learn it together, the right way. I won't promise you a bounty or a job. Anyone who does is lying. What I do promise: real labs, my actual methodology, and a rat who answers your questions in Discord. 900 is still capped btw, because I onboard every member myself (30 min call + a written plan). And as always: only hack what you're authorised to hack. Scope is the job, not a footnote. Sale ends 3 Nov, then the prices crawl back. ↓ thexssrat.podia.com/dff7ec0a… Happy hacking, rats 🐀 #bugbounty #ethicalhacking #infosec #cybersecurity

A quick update on coaching (and where the focus is right now). To everyone who has been messaging about 1-on-1 coaching: coaching isn't gone, but my roster is completely booked. Right now, my priority is giving 100% of my attention to the students currently in the lineup, while behind the scenes I am actively building out and revamping our platform so the intake process and learning curve are bulletproof for the next wave of rats. If you don't want to sit on a waiting list, I just opened 2 positions for the 900 Endless Updates Bundle. This isn't a passive video library. It is the full ecosystem designed to bridge that gap and give you direct guidance while the main coaching queue is locked: 30-Minute 1-on-1 Orientation Call: We look at your current skill set, your schedule, and your career targets. You leave with a tailored, written game plan built around your reality—not generic advice. Direct Access & Feedback: Even while the platform intake is being revamped, bundle members get direct access to ping me and our mentors inside our private Discord server and hunt group. Three Complete Certifications (Vouchers Included): Full curriculum and exam vouchers for CNWPP (Network & Web Pentesting), CAPIE (API Hacking Expert), and CMWAP (Modern Web App). Lifetime Infrastructure: All 47+ current courses, weekly CyberCrusades/Sunday live sessions, and lifetime RatCTF Premium with browser-based vulnerable targets. Plus every future course I build, forever. I only have room for 2 spots right now to ensure I can give proper attention to each orientation call. Grab one of the 2 open positions for €99.50 (normally €199, split-pay available): 🔗 Join the Endless Bundle here: thexssrat.podia.com/full-hou…

I am sorry but we are not onboarding any coaching students at the moment - I want to ensure we first get through our current line up but we have been building a pretty awesome platform along the way Hopefully this will help smooth things out a little bit and all you rats can eat the cheese it produces soon <3

Stop paying $4,000+ to learn penetration testing. Security education shouldn't rip a hole in your pocket. The cybersecurity industry has a massive gatekeeping problem. Aspiring pen-testers are expected to drop thousands of dollars just to get the foundational knowledge needed to pass the OSCP. I don't like expensive knowledge. That’s why I built Uncle Rat's Ultimate OSCP Prep Guide and Course. It is a direct middle finger to the bloated, expensive institutions—crafted by a lone rat to give you exactly what you need to pass, for a fraction of the cost. Over 40 hours of material. 139 lessons. End-to-end methodology. What you get inside: The Full Playbook: 14 modules covering everything from Networking and Web Attacks to Active Directory (3 domains) and Linux/Windows PrivEsc. Flawless Execution: Every module was thoroughly tested by technical reviewers. Docker-based labs, validated exploitation steps, and strict command-by-command accuracy. Exam-Ready Assets: Ready-to-use note-taking templates (Obsidian, Notion, OneNote), cheat sheets, and professional report-writing templates. Real Practice: 3 free months of RatCTF Premium included. Train on 25 deliberately vulnerable boxes directly in your browser with no VPN required. We need to educate, not bankrupt our community. For a limited time, you can grab the entire bundle for just €25 (normally €50). Unc did the hard work. Now it is your time. 🔗 Grab the FLASH50 discount here: thexssrat.podia.com/uncle-ra…

I got hacked. I want to publicly thank my hackers. I’ve been humbled and really shown they’ve had the best intentions in mind for everyone while doing it. Especially for the ones in this world that can’t defend themselves. Dear rats… black hat doesn’t always mean negative intentions. A surgeon doesn’t cut in your body. Sometimes our egos get so big they give us pain… but worst of all they start to hurt others. Don’t let your ego get the best of yourself. I’m very sure these are some of the best hackers in the world. And they have no bad intentions. Damn dude, think about that for a moment. Even back when I got started my labs would get defaced often while much worse things could have been done to me. Now it’s the same thing. ❤️ I am soooo impressed by some of the things that happened, you have no idea how fucking cool it was and how much power some of these groups have. Respect 🫡

🐀 Most bundles come with a login, a welcome email and 47 things to open. Then you're on your own. That's the part I've changed on the 900 bundle. Every buyer now gets a 30-minute orientation call with me. You tell me your actual job, your hours and what you're after (a cert, a first role, bounties). You leave with a written plan built around that, not a generic roadmap. There's a real, anonymised example on the page. That call is why seats go out in small batches. 2 are open right now. When those two are in and I've met them, the next two open. Ariful and I take care of every rat who joins. What the seat holds: → Every course, current and retired, plus every future one, added automatically → 3 cert paths (CNWPP, CAPIE, CMWAP), exam vouchers included → Every live: CyberCrusades, the weekly Sunday session, private workshops → Lifetime RatCTF Premium + the 900 Discord: a few hundred rats worldwide, the mentors, my hunt group → Merch at cost €199 one time, or 3 × €71. No subscription. I can't promise you a bounty, a pass or a job. Anyone who does is lying. Authorised, in-scope targets only. If you'd rather start with a plan than a catalogue 👇 thexssrat.podia.com/full-hou… Much love <3 #bugbounty #infosec

Quick question: can you plan a pentest, stick to your scope, and explain your choices? 🐀 CMWAP (Certified Modern Web App Pentester) grades methodology and scope discipline over how many exploits you land. 90-min plan deadline, 24h window, 10-min debrief video, 3 months free RatCTF practice. Beginners can pass. thexssrat.podia.com/cert Full catalog and course bundles: thexssrat.podia.com/ #cybersecurity #pentesting

Your SIEM is only as good as the detections you write for it 🐀 Help Me, I Got Compromised: 5 connected hosts, 1 breach. Parse the logs, triage 15 SOC alerts, then write a Python script that auto-classifies the true positives. Finally, defend a host that's actively under attack 🔥 ratctf.com/purple-team P.S. Want the full course catalog? thexssrat.podia.com/ #purpleteam #infosec

A vulnerable lab built from a real finding: path traversal and account takeover challenges, open to anyone who wants to practise instead of only reading write-ups. Perfect if you're new to bug bounty and want a safe target to break :D

PHP2Shell demoed giving a shell on MediaWiki, Symfony, Laravel and phpBB on pre-patch PHP 8.2 to 8.5. If you run PHP anywhere and haven't updated yet, assume someone is already poking at it. Patch tonight, not next sprint.

A year of HTTP request smuggling research in one write-up: 4 mechanisms across 10 products, all coming down to reused connections with an unfinished previous request. If you hunt smuggling or desync bugs, read this before your next target. Great work :D

No bounty, but the team reproduced an integer-wrap bug across both backends and praised the rigour of the submission. A report that clean gets remembered. Hall of Fame plus that kind of reputation is worth more than one payout. Well done :D

5 accepted reports (1 low, 3 mediums, 1 high) two months into bug bounty as a side interest is a great start. Steering an AI tool well is a skill of its own, the triage still has to be right. Welcome to the game :D

A medium on YesWeHack for a business logic error (CWE-840), nice! Logic bugs don't show up in any scanner, you only find them by actually understanding what the app is supposed to do. That's the skill that keeps paying. Congrats :D

Congrats on the eMAPT! Mobile app pentesting is still one of the less crowded corners of bug bounty, so a cert that forces you to actually hook, patch and intercept apps pays off fast. Go break some APKs :D

4th bounty from the same program, this time an unauthenticated endpoint leaking full roster data. This is why you never leave a program after the first payout: once you know how their devs think, the bugs keep coming :D #bugbounty

hello amazing hackers Stop spraying XSS payloads. Read the reflection context first. That is the whole game :-) 1. Drop a unique harmless string (like ratxss1337) into every param and header you control. 2. Search the response for it. Every hit sits in a context: HTML body, inside an attribute, inside a script block, inside a JS string, or inside a URL (href/src). 3. Break out of THAT context only. Body: open a new tag. Attribute: close the quote and add an event handler. JS string: close the string and end the statement. href: try the javascript: scheme. 4. Blocked? Check what survives: angle brackets, quotes, slashes, parentheses. Whatever survives tells you which trick is left. 5. Ask where the value lands LATER: emails, admin panels, PDF exports, logs. Stored and blind XSS hide there. 6. Prove impact, not alert(1). Show what the script can read or do as the victim: account data, changing an email, actions in their session. Try it today on a free lab: labs.hackxpert.com/ Want the whole path from zero to your first bounty? A discount applies via the link: thexssrat.podia.com/big-beau… Which context catches you out most often? Tell me below.

🐀 Lab of the day on RatCTF: Keyspace. A forgotten Redis cache from a product launch is still online, and nobody knows if it even has a password. Time to find out what's exposed 👀 Free to try: ratctf.com/challenges/redis-… Liked this? The 901 Beginner Web Hacking Guide Bundle is the natural next step, a discount applies via the link: thexssrat.podia.com/901-begi… #infosec #bugbounty #ctf #redis